Security and compliance

How we protect your data

What is certified, where your data lives, and the documents your security team can request.

Start your security review

Every policy is available on request. Ask by email at security@istina.ae.

All 87 controls are in place, across 29 areas.

Policies
- Information Security Policy
- Access Control and Termination Policy
- Incident Response Policy
View more in Policies26 on request
Cryptographic protections
- Encryption at rest
- Production key management
- Encryption in transit
View more in Cryptographic protections3 controls
Identification and authentication
- Session timeout enforcement
- Password policy
- Access control procedures
View more in Identification and authentication8 controls
Data classification and handling
- Data classification and access control
- Customer data deletion
- Data retention and deletion policy
View more in Data classification and handling3 controls
Network security
- Secure connection requirements
- Firewall rule management
- Network firewall
View more in Network security4 controls
Secure engineering and architecture
- Source code access controls
- Environment and tenant segmentation
- Environment separation
View more in Secure engineering and architecture6 controls
Endpoint security
- Anti-malware protection
- Removable media controls
- Remote work policy
View more in Endpoint security3 controls
Incident response
- Incident response procedures
- Security incident logging
- Regulatory authority communication
View more in Incident response3 controls
Business continuity and disaster recovery
- Database backups
- Multi-availability zone deployment
- Business continuity and disaster recovery plan
View more in Business continuity and disaster recovery4 controls